Home / Amazon / DVA-C01

Amazon DVA-C01 Practice Test - Questions Answers, Page 11

Question list

List of questions

Question 101

(0)

A Developer is developing an application that manages financial transactions. To improve security, multi-factor authentication (MFA) will be required as part of the login protocol. What services can

Question 102

(0)

A game stores user game data in an Amazon DynamoDB table. Individual users should not have access to other users’ game dat a. How can this be accomplished?

Question 103

(0)

A company developed a set of APIs that are being served through the Amazon API Gateway. The API calls need to be authenticated based on OpenID identity providers such as Amazon or Facebook. The APIs

Question 104

(0)

A supplier is writing a new RESTful API for customers to query the status of orders. The customers requested the following API endpoint. http://www.supplierdomain.com/status/customerID Which of

Question 105

(0)

A development team consists of 10 team members. Similar to a home directory for each team member the manager wants to grant access to user-specific folders in an Amazon S3 bucket. For the team membe

Question 106

(0)

A legacy service has an XML-based SOAP interface. The Developer wants to expose the functionality of the service to external clients with the Amazon API Gateway. Which technique will accomplish this

Question 107

(0)

A company is using AWS CodeBuild to compile a website from source code stored in AWS CodeCommit. A recent change to the source code has resulted in the CodeBuild project being unable to successfully

Question 108

(0)

A web application is using Amazon Kinesis Streams for clickstream data that may not be consumed for up to 12 hours. How can the Developer implement encryption at rest for data within the Kinesis Str

Question 109

(0)

A Developer wants to use AWS X-Ray to trace a user request end-to-end throughput the software stack. The Developer made the necessary changes in the application tested it, and found that the applica

Question 110

(0)

A Developer executed a AWS CLI command and received the error shown below: What action should the Developer perform to make this error human-readable?

Question 101

A Developer is developing an application that manages financial transactions. To improve security, multi-factor authentication (MFA) will be required as part of the login protocol. What services can the Developer use to meet these requirements?

Amazon DynamoDB to store MFA session data, and Amazon SNS to send MFA codes

Amazon Cognito with MFA

AWS Directory Service

AWS IAM with MFA enabled

Show Answer Comment (0)

Question 102

A game stores user game data in an Amazon DynamoDB table. Individual users should not have access to other users’ game dat a. How can this be accomplished?

Encrypt the game data with individual user keys.

Restrict access to specific items based on certain primary key values.

Stage data in SQS queues to inject metadata before accessing DynamoDB.

Read records from DynamoDB and discard irrelevant data client-side.

Show Answer Comment (0)

Question 103

A company developed a set of APIs that are being served through the Amazon API Gateway. The API calls need to be authenticated based on OpenID identity providers such as Amazon or Facebook. The APIs should allow access based on a custom authorization model.

Which is the simplest and MOST secure design to use to build an authentication and authorization model for the APIs?

Use Amazon Cognito user pools and a custom authorizer to authenticate and authorize users based on JSON Web Tokens.

Build a OpenID token broker with Amazon and Facebook. Users will authenticate with these identify providers and pass the JSON Web Token to the API to authenticate each API call.

Store user credentials in Amazon DynamoDB and have the application retrieve temporary credentials from AWS STS. Make API calls by passing user credentials to the APIs for authentication and authorization.

Use Amazon RDS to store user credentials and pass them to the APIs for authentications and authorization.

Show Answer Comment (0)

Question 104

A supplier is writing a new RESTful API for customers to query the status of orders. The customers requested the following API endpoint. http://www.supplierdomain.com/status/customerID Which of the following application designs meet the requirements? (Select two.)

Amazon SQS; Amazon SNS

Elastic Load Balancing; Amazon EC2

Amazon ElastiCache; Amazon Elacticsearch Service

Amazon API Gateway; AWS Lambda

Amazon S3; Amazon CloudFront

Show Answer Comment (0)

Question 105

A development team consists of 10 team members. Similar to a home directory for each team member the manager wants to grant access to user-specific folders in an Amazon S3 bucket. For the team member with the username “TeamMemberX”, the snippet of the IAM policy looks like this:

Instead of creating distinct policies for each team member, what approach can be used to make this policy snippet generic for all team members?

Use IAM policy condition

Use IAM policy principal

Use IAM policy variables

Use IAM policy resource

Show Answer Comment (0)

Question 106

A legacy service has an XML-based SOAP interface. The Developer wants to expose the functionality of the service to external clients with the Amazon API Gateway. Which technique will accomplish this?

Create a RESTful API with the API Gateway; transform the incoming JSON into a valid XML message for the SOAP interface using mapping templates.

Create a RESTful API with the API Gateway; pass the incoming JSON to the SOAP interface through an Application Load Balancer.

Create a RESTful API with the API Gateway; pass the incoming XML to the SOAP interface through an Application Load Balancer.

Create a RESTful API with the API Gateway; transform the incoming XML into a valid message for the SOAP interface using mapping templates.

Show Answer Comment (0)

Question 107

A company is using AWS CodeBuild to compile a website from source code stored in AWS CodeCommit. A recent change to the source code has resulted in the CodeBuild project being unable to successfully compile the website. How should the Developer identify the cause of the failures?

Modify the buildspec.yml file to include steps to send the output of build commands to Amazon CloudWatch.

Use a custom Docker image that includes the AWS X-Ray agent in the AWS CodeBuild project configuration.

Check the build logs of the failed phase in the last build attempt in the AWS CodeBuild project build history.

Manually re-run the build process on a local machine so that the output can be visualized.

Show Answer Comment (0)

Question 108

A web application is using Amazon Kinesis Streams for clickstream data that may not be consumed for up to 12 hours. How can the Developer implement encryption at rest for data within the Kinesis Streams?

Enable SSL connections to Kinesis

Use Amazon Kinesis Consumer Library

Encrypt the data once it is at rest with a Lambda function

Enable server-side encryption in Kinesis Streams

Show Answer Comment (0)

Question 109

A Developer wants to use AWS X-Ray to trace a user request end-to-end throughput the software stack. The Developer made the necessary changes in the application tested it, and found that the application is able to send the traces to AWS X-Ray. However, when the application is deployed to an EC2 instance, the traces are not available.

Which of the following could create this situation? (Select two.)

The traces are reaching X-Ray, but the Developer does not have access to view the records.

The X-Ray daemon is not installed on the EC2 instance.

The X-Ray endpoint specified in the application configuration is incorrect.

The instance role does not have “xray:BatchGetTraces” and “xray:GetTraceGraph” permissions.

The instance role does not have “xray:PutTraceSegments” and “xray:PutTelemetryRecords” permissions.

Show Answer Comment (0)